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INFORMATION SYSTEMS SECURITY GROUP 
SUMMARY REPORT - FEBRUARY 1974 


HIGHLIGHTS : I%e- -^cti-v ities of _th.e ISSG during February 1974 . 
were highlighted by the following: . 

I / . Progress — during* February 

tuwa-rd t+re development trf a Community Limited 
Access Intelligence Register (CLAIRE) to 
satin -fy the DCI's requirement for an automated 
"bigot list" control system. The Intelligence 
Community Staff was briefed on our efforts to 
define user requirements and operational 
concepts for such a system. The Office of 
Joint Computer Support was tasked to make a 
feasibility study.* OJCS produced the feasibility 
study which suggested that such a system, 
though administratively difficult to implement, 
was both technically fcac i b 1 e a nd economical V./ 

A Jy'. ^lans to hold a computer security 

seminar for Office of Security personnel and 
selected other Agency employees with computer 
security responsibilities ac h iev ed si g n ific a nt- &>A/7 
’ develop ment a 1 . p- r o gr ess- d ur -i-e g- - ■ F c-b r tta r y ., The 

schedule for the seminar was drafted and itc . 
accreditation by the Director of Training w-a ?5 f4A*!» 

■&££>/ received. The seminar will be conducted part- 
time, two hours per day, over a four-week 
period. It is expected to be conducted in May 
and November 1974. 

•3 /. During the. month t-hv TS-SQ-de-fYned Xecu- 
nty requirements A for the Mass Storage System 
being developed under contract by the Office 
of Joint Computer Suppor t ^he security 
requirements for this computer storage sys tem . Ti-befie-F-efiz 
are highly important* ifc£feai; v With the passage 
of time this storage capability will handle a 
large percentage of the data processed by 
computers in the Agency.^ 
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yp. (-Eo4i©w-i*g—^fee- recommendation^ a^- the 
Inspector Generali m ad e afto -T-hirs- review o£ TTfe 
Office \f Security's operations in 1973 # * 
dtw4^g-d4hrua-ry dra£ti»g.- 


KT tV 7 8 “ 

jrf\ Headquarters Regulation^ defining the roles 
and responsibilities in the computer securit 


and responsibilities in the computer security 
area of the Office of Security, the Office of 
Communications A computer components, and 
computer users .} -jffhese responsibilities 
essentially accent the policy development, 
guidance , e and ppmplian^ determination roles 
of the -@6 of andnnCOitpu Pe r security implementation 
responsibility ofinGieads of computer components. 

The draft is in the process of informal 
coordination with OJCS. 

__ \T UM£ -&v> 

J> During Pe brttary ■ on t he recommenda-fcion o-f 

fche-~b&&G the Director of Security concurred in 
M§S Directorate plans to disperse computer 
terminals in the Ames Building^ Earlier plans 
had suggested "bfee concentrati such terminals 

in an Ames Building Data Access Center, -fir 
support- of these- -4ispersal._plans-y— the-- 1S&G -dras 
i o - i - t i -ated,acti._Qn to. develop Security standards uffy 

•^itveu^for a Data Distribution Grid in Agency buildings 

outside of Headquarters |i\f SuppertT C T tv s V pLA/s 

k- /. During February . tha_.ISSG- began $ review ^ 5 /if^CvV 
of Executive Registry plans to automate selected AspE^-TS cF 
trS operations including^ftiaintenance of its Document 
Index ^publication of the daily Journal , and 77h 
recording of the minutes of the DCI's morning 
meetings. The principal purpose of the survey 
is to evaluate the risks associated with the 
introduction of sensitive data contained in 
these operations into the OJCS resource sharing 
computer operations. 

ANALYSIS 

The ISSG work load for February was significantly 
greater than January. This is evidenced by the fact that 
despite an above average productivity of completed cases 
during February, pending actions on 1 March were almost 60 
percent more than on 1 February. Except for problem 
resolution type actions, the increase in activity was 
distributed over all types of cases. 
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TRENDS 

Continuation of the February work level through 
March and April is expected. No dramatic increase over the 
new higher February level is foreseen for the next few 
months. Most of the February increase over the January 
activity level is attributed to the convenience to customer 
components of the new ISSG Headquarters location. 

P. Steps initiated in January to transfer ADP support 
activities to^the ISSG clerical staff are beginning to 
bear fruity Gaspr 1 April target date for the completion of 
this transfer will be met. Evidence is developing to 
suggest an increase in our clerical table of organization. 
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MEMORANDUM FOR: Acting Chief, Plans, Programs Branch 
SUBJECT : Monthly Activities Summary - February 1974 

Attached is the Monthly Activities Summary for 
February 1974 of the Information Systems Security Group. 


•‘SVaK^’ 


STATINTL 


Chief, Informatio^ystem^ecurity Group 
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INFORMATION SYSTEMS SECURITY GROUP 
SUMMARY REPORT - FEBRUARY 1974 


H I GHLIGHTS : The actlvitie. of the ISSG during February 1974 
were highlighted by the following: 

* a ‘, ^**° 2 ^ess was Bgtde during February 

? h f d ®yelopmei|i of a Community Limited 
Access Intelligence Register (CLAIRE) to 

»biiot y i^?H DCI J rac * ul * e ®«nt an automated 
bigot list* control system. The IntelHffenr« 

Community Staff was briefed on our efforts to 
re « u i™**»ts and operational 
fo f su £b a system. The Office of 
*u??T? Uter s t u Wort was tasked to make a 

«?Sdi dUX StUdy; °i CS produced the feasibility 
study which suggested that such a system, 

was U hoth ? n i S J ra ?, iVe i y di£fi cult to implement , 
was both technically feasible and economical. 

semi > nar I fnS ni?? S t0 * h 2 ld a computer security 

selected f o£h25 f A C ® ° £ S * curit y Personnel and 
other A gency employees with computer 
security responsibilities achieved significant 
developments 1 progress during February. The * 
schedule for the seminar was drafted and its 
accreditation by the Director of Training was 

k The seminar wil * be conducted R part- 
per da 7 » ov er a four-week 

»rSoverter 1 ?97i! eCt#<1 be C ° nduet#d *» «•/ 

Du T in g the month the ISSG defined secu- 
rity requirements for the Mass Storage System 

of 1 T«^r V ? 1 ° ped under contract by the Office 
of Joint Computer Support, The security 

Ir2 U hf e v !? nt3 f ° r thl * com P ut ®* storage system 

of %w h ik- imp ? rtant in that with th ® Passage 
of time this storage capability will handle a 

large percentage of the data processed by 
computers m the Agency. 
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d. Following the recommendation of the 
Inspector General made after his review of 
Office of Security operations in 197S, 
during February the ISSG completed drafting 
a Headquarters Regulation defining the roles 
and responsibilities in the computer security 
area of the Office of Security, the Office of 
Communications, computer components, and 
computer users. These responsibilities 
essentially accent the policy development, 
guidance, and compliance determination roles 
of the OS and computer security implement a tion* 
responsibility of heads of computer Components. 
The draft is in the process of informal 
coordination with OJCS. 

e. During February on the recommendation of 
the ISSG the Director of Security concurred in 
M§S Directorate plans to disperse computer 
terminals in the Ames Building; earlier plans 
had suggested the concentration of such terminals 
in an Ames Building Data Access Center. In 
support of these dispersal plans, the ISSG has 
initiated action to develop security standards 
for a Data Distribution Grid in Agency buildings 
outside of Headquarters. 

f. During February the ISSG began a review 
of Executive Registry plans to automate selected 
operations including maintenance of its Document 
Index, publication of the daily Journal, and 
recording of the minutes of the R?Ps morning 
meetings. The principal purpose of the survey 
is to evaluate the risks associated with the 
introduction of sensitive data contained in 
these operations into the OJCS resource sharing 
computer operations . 


ANALYSIS 

\ 

The ISSG work load for February was significantly 
greater than January. This is evidenced by the fact that 
despite an above average productivity of completed cases 
during February, pending actions on 1 March were almost 60 
percent more than on 1 February. Except for problem A 

resolution type actions, the increase in activity was \ 

distributed over all types of cases. ' 
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TRENDS 

March aSH^?! t irexpec t i e e d Feb S“T WI J level through 
new higher February level ii foresIelTfnr J" crease ° ver the 

COmponents of the new ISSG HeadqSrte?r"ca?Jo„?° CUStomor 

actlvi t?. t a eP ; o i ?L tl ?S t lG AD ? a “PP°« 


suggest an increase in our clerical t0 

xn our clerical table of organization. 
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